Advance Stores Company, Inc.

The Washington Attorney General disclosed a data breach at **Advance Auto Parts**, where unauthorized actors gained access to sensitive personal information of approximately **21,791 Washington residents** between **April 14, 2024, and May 24, 2024**. The compromised data included highly sensitive details such as **names, Social Security numbers, driver’s license numbers, and dates of birth**—information that significantly heightens the risk of identity theft, financial fraud, and other malicious activities. Affected individuals were formally notified via written correspondence around **July 10, 2024**.The breach exposes customers to long-term vulnerabilities, as the stolen data (particularly SSNs and driver’s license numbers) cannot be easily replaced or secured once leaked. The incident underscores systemic failures in safeguarding customer records, potentially eroding trust in the company’s cybersecurity measures. While the exact method of unauthorized access remains undisclosed, the scale and nature of the exposed data suggest a targeted intrusion with severe implications for those impacted. The company may face regulatory scrutiny, legal repercussions, and reputational damage as a result of this breach.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=17218

TPRM report: https://www.rankiteo.com/company/advance-auto-parts

"id": "adv156082025",
"linkid": "advance-auto-parts",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '21,791 (Washington residents)',
                        'industry': 'Automotive Retail',
                        'location': 'United States (Washington residents '
                                    'affected)',
                        'name': 'Advance Auto Parts',
                        'type': 'Corporation'}],
 'customer_advisories': 'Written notice provided to affected individuals (July '
                        '10, 2024)',
 'data_breach': {'data_exfiltration': 'Yes (unauthorized access)',
                 'number_of_records_exposed': '21,791 (Washington residents)',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         "driver's license "
                                                         'numbers',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2024-07-10',
 'description': 'The Washington Attorney General reported that Advance Auto '
                'Parts experienced a data breach involving unauthorized access '
                'to personal information from April 14, 2024, to May 24, 2024. '
                'Approximately 21,791 Washington residents were affected, with '
                'compromised data including names, Social Security numbers, '
                "driver's license numbers, and dates of birth. Written notice "
                'was provided to affected individuals on or about July 10, '
                '2024.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 "driver's license numbers",
                                 'dates of birth'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'source': 'Washington Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Written notice to affected '
                                        'individuals (July 10, 2024)'},
 'title': 'Advance Auto Parts Data Breach (2024)',
 'type': 'Data Breach'}